Cisco FabricPath Stripping for MTP

[Legacy User]

Has anyone come across a solution on how to strip away (decrypt) FabricPath for MTP to see bi-directional flow of packets (transactions).

 

Currently we have traffic coming from F5 -> Cisco Span Port Switch (w/ FabricPath) -> OHS (Oracle HTTP Server)

 

Also in parallel, F5 sends traffic to APCON (Port Agrregrator), which is then sent to MTP

 

MTP only see one way traffic from F5 to OHS (one-way). Doesn't see traffic coming back b/c of FabricPath technology which MTP is not able to read.

 

Any and all help will be greatly appreciated. This is a very time sensitive issue (we just found out and only have a couple of days left).

 

Thanks

Manish

 

CA Infrastructure Management CA APM

[Hallett German]

Hi:

I am marking this as assumed answered you did not request a follow-up over some time. Please open a new question with updated information if needing additional assistance.

　 

Thanks

Hal German

APM Support

[Legacy User]

I wanted to make customers and CA aware of this issue so they can proactively have a resolution in place if they have the same scenario. It was a two part, a question as well as caution!

[Jeffrey Arndt]

The MTP does NOT have the ability to decrypt FabricPath data.

 

You must decrypt it prior to it hitting the MTP or your data will never look proper.

 

The MTP sees FabricPath data as Unidirectional data.

[Jeffrey Arndt]

If you take a PCAP of the data, and run it through Wireshark (which has the ability to decode FabricPath data), you will see that the data appears to be Unidirectional until you decode the packets.